• Follow us

Social Media

Google stored some G Suite passwords in unhashed form for 14 years

Google revealed that it recently discovered a bug that caused a subset of its enterprise G Suite customers to have their passwords stored in an unhashed — albeit encrypted — form for about 14 years.

“This is a G Suite issue that affects business users only — no free consumer Google accounts were affected — and we are working with enterprise administrators to ensure that their users reset their passwords,” Google said in a blog post disclosing the security lapse.

The company failed to specify exactly how many customers were affected this way. However, it went on to stress that it didn’t find any evidence of improper access.

G Suite is the company’s corporate version of Gmail and apps like Drive, Docs, and Hangouts, among others. This February, Google announced it had over 5 million paying businesses on its G Suite platform.

The issue stems from the way Google implemented password security in its core sign-in system. There are two different slip-ups at play here.

The first involves a G Suite feature available for IT staff since 2005. The tool, now no longer in existence, allowed them to set and recover users’ passwords via the admin console.

Google says the feature had been designed with an intent to onboard new employees, and help them sign into their accounts with passwords manually set by the admins. These passwords, according to the blog post, were not hashed.

Hashing is a standard security practice to protect user credentials by scrambling them, using a one-way encryption algorithm.

The company has a relatively good reputation when it comes to account security, so the fact this bug has been around for so long is a little disconcerting.

The second involves storing some unhashed user credentials for up to two weeks. This was discovered in January 2019 as it was troubleshooting new G Suite customer sign-ups, the search giant said.

With this latest development, Google becomes the latest company to join Facebook, GitHub, Instagram, and Twitter to suffer from embarrassing plaintext password bugs.

Back in May 2018, Twitter asked all its 330 million users to change their passwords after a bug exposed them in plaintext in an internal log. Then Facebook acknowledged earlier last March that it had been storing millions of user passwords in plaintext since 2012. A few weeks later, it expanded the scope of the security lapse to include millions of Instagram users.

Google’s case is a little different in that the passwords were eventually encrypted before they were stored on disk. This means, even if an attacker managed to get hold of your password, they would still have to unscramble it in order to gain access to your account.

A malicious interloper could theoretically use the search giant’s backend software to decrypt your password, although the scenario is extremely unlikely, as the attacker would’ve had to break into Google’s security infrastructure first without being detected.

Noting that both these security blunders have been fixed, Google urged users to make use of multi-factor authentication to thwart any account takeover attacks. It also apologized to its users for not following industry standards and promised to do better.

Read next: 55,000 Brazilians scammed out of $200M+ worth of fake cryptocurrency

Read More



Leave A Comment

More News

TechCrunch » Social

Amazon Spark, the retailer’s two-year-old Instagram competitor, has 2019-06-14 20:18:20Amazon’s two-year-old Instagram competitor, Amazon Spark, is no more. Hoping to capitalize on the social shopping trend and tap into the power o

Calendar influencers? Event social network IRL raises $8M 2019-06-13 11:20:55Why is there no app where you can follow party animals, concert snobs or conference butterflies for their curated suggestions of events? That’s

Facebook backs social commerce startup Meesho in first 2019-06-13 07:31:49As Facebook explores ways to generate revenue from WhatsApp, the company is now turning to a startup that already has a lead. The social juggernaut sa

Facebook collected device data on 187,000 users using 2019-06-12 17:09:43Facebook obtained personal and sensitive device data on about 187,000 users of its now-defunct Research app, which Apple banned earlier this year afte

Facebook’s Blood Donations feature arrives in US, will 2019-06-12 10:15:08Facebook today is expanding its set of features focused on blood donations. The company since 2017 has been working with blood donation centers worldw

Fortnite maker Epic acquires social video app Houseparty 2019-06-12 10:08:34What does a gaming company do after raising $1.25 billion? Acquisitions seem like a pretty good place to start. Epic Games — of Unreal Engine an

WhatsApp is finally going after outside firms that 2019-06-11 15:56:30WhatsApp has so far relied on past dealings with bad players within its platform to ramp up its efforts to curtail spam and other automated behavior.

Dropbox relaunches as an enterprise collaboration workspace 2019-06-11 13:19:37Dropbox is evolving from a file-storage system to an enterprise software portal, where you can coordinate work with your team. Today the company launc

Facebook’s new Study app pays adults for data 2019-06-11 11:59:28Facebook shut down its Research and Onavo programs after TechCrunch exposed how the company paid teenagers for root access to their phones to gain mar

Yubo is a social network about socializing 2019-06-11 08:33:56Meet Yubo, a French startup that wants to make social networks a bit more… social. Yubo is an app designed for teenagers, and it’s all ab

Shazam for Android now recognizes music played through 2019-06-11 02:51:26Shazam, the Apple-owned app that helps users identify songs playing around them, can now recognize songs you’re listening to through your headph

Changes to Facebook Graph Search leaves online investigators 2019-06-11 00:56:54When Facebook Graph Search launched six years ago, it was meant to help users discover content across public posts on the platform. Since then, the fe

Mashable

All the data self-driving cars take in from New! 2019-06-18 13:00:00Self-driving cars are almost too observant, taking in information from light-emitting LiDAR sensors, radar equipment, microphones, and cameras. But al

Why do some people Capitalize Letters when they're New! 2019-06-18 12:18:07In the era of text messaging, tweeting, and digital communication, capitalization can be a Real Bitch. From a young age, we're trained to capitalize

The Anova Bluetooth sous vide cooker is $20 New! 2019-06-18 12:05:02TL;DR: This precise sous vide cooker from Anova Culinary is your best bet at achieving a perfect steak — pick one up on Amazon for just $78.78 (

Apple TV is getting picture-in-picture video playback New! 2019-06-18 11:56:30Apple is never keen to talk about forthcoming new features until they are ready to launch, but sometimes beta releases reveal stuff early. That's exa

So many health and wellness apps haven't done New! 2019-06-18 11:32:01With the explosion in health and wellness apps peddling self-improvement, your smartphone could one day hold the keys to helping you manage your lungs

Here's why the future of mobility is sucking New! 2019-06-18 11:30:02Based on how much we rely on shared transport services (Lime, Mobike, Uber Jump) today, it's safe to assume the next steps will involve driverless ve

Man straps GoPro to a turtle and gets New! 2019-06-18 11:26:01 Looks like Crush the turtle's totally gnarly cousin is shooting some sick pond footage.  But the credit truly goes to The Fish Whisperer, a Y

The 2-in-1 Acer Spin 5 has Alexa built New! 2019-06-18 11:16:57TL;DR: The 2-in-1 Acer Spin 5 is a serious Dell XPS competitor and it's only $799.99 at Amazon right now, saving you $200. You would think that wanti

Beats EP headphones are on sale for under New! 2019-06-18 11:07:13TL;DR: These durable Beats on-ear headphones usually cost $129.99, but you can grab a pair on sale at Walmart for just $73.99 — a $56 savings. B

Scientists just filmed a deep sea creature spew New! 2019-06-18 11:01:22At some 4,700 feet beneath the sea, marine scientists filmed a shrimp spew glowing matter, or bioluminescence, from its mouth.  This natural even

Inventor hacks up a perfectly good Tesla Model New! 2019-06-18 11:00:00Simone Giertz, the queen of shitty robots, modified her Tesla into a not-at-all-shitty pickup truck that she has dubbed "Truckla." The YouTuber and

The iPad Pro is on sale at Amazon New! 2019-06-18 10:50:22TL;DR: The all-powerful iPad Pro is the latest and greatest tablet from Apple — save $100 on Amazon and score one for just $699. When you think

The Next Web

This is how rich you’d be if you New! 2019-06-18 11:48:05People don’t usually regret their first bit of exciting hardware. On the contrary, the majority of folks have strong nostalgic feelings about th

Crypto Twitter responds to the reality of Facebook’s New! 2019-06-18 11:25:41Following months of speculation, Facebook finally confirmed the release of Libra next year. The tech giant also unveiled details about Calibra, its co

How to avoid spilling coffee on your expensive New! 2019-06-18 10:43:23DON’T DRINK COFFEE NEAR YOUR EXPENSIVE LAPTOP. For more gear, gadget, and hardware news and reviews, follow Plugged on Twitter and Flipboard.

EU lawmakers need to look beyond the ‘top New! 2019-06-18 10:00:19Brussels policy makers could be forgiven for wanting to move quickly to regulate ‘the internet.’ Assailed by an avalanche of public opinio

This $29 bundle lays the groundwork for any New! 2019-06-18 09:00:00Over eight courses featuring more than 20 hours of instruction, you’ll start gathering insight on the focal points of a winning business plan.

CHEAP: $270 off Harman Kardon’s Onyx 4 speaker New! 2019-06-18 08:52:42We’ve written quite a few times about cute and compact Bluetooth speakers. But today, we’re bringing a mega deal for a top-shelf speaker.&

How YouTube became the app parents love to New! 2019-06-18 08:48:33Over the last several months, YouTube has reeled from a wave of criticism. It has been accused of radicalizing young voters, ignoring harassment of LG

How 3D spintronics will take hard drive performance New! 2019-06-18 08:37:08Spintronics might not be the sort of word that comes up in everyday discussions, but it has been revolutionising computer technology for years. It&rsq

How to get started with mind mapping apps New! 2019-06-18 08:34:26Welcome to TNW Basics, a collection of tips, guides, and advice on how to easily get the most out of your gadgets, apps, and other stuff. List ma

An open letter to my Macbook Pro, on New! 2019-06-18 08:32:52My dearest MacBook Pro, I’m sorry. I’m so, so sorry. It wasn’t meant to be like this. We’ve spent five beautiful years togethe

India is still hounding WhatsApp to make its New! 2019-06-18 02:52:00The privacy vs. security battle is heating up in India. The Indian government has once again asked WhatsApp to “digitally fingerprint” eve

How to recover your hacked Instagram account New! 2019-06-18 01:41:34Welcome to TNW Basics, a collection of tips, guides, and advice on how to easily get the most out of your gadgets, apps, and other stuff. Previou

Entrepreneur

Avoid Negativity by Embracing This Hidden Part of New! 2019-06-18 13:30:00Jack Canfield says that meeting your goals can be as easy as appealing to the person inside you.

Why Apple Evangelist Oleksandr Kosovan Is Competing With New! 2019-06-18 13:00:00He spent over a month's salary on his first Apple keyboard and lived in a dorm room while starting his business. This is his story.

The Ugly Truth About 'Vanity Metrics': 3 Keys New! 2019-06-18 12:30:00Data is hardly in short supply, which is why it's so important to understand what to measure and how it relates to your business.

Don't Get Duped by This Sneaky Google Calendar New! 2019-06-18 12:04:17Despite what that Google Calendar invite says, you probably didn't win a bunch of money.

Chick-fil-A Is Now the 3rd-Largest Restaurant Chain in New! 2019-06-18 11:59:50Chick-fil-A moved up from the No. 7 spot on last year's Top 200 ranking, passing Wendy's, Burger King, Taco Bell and Subway.

4 Tech Trends Shaping the Future of Media New! 2019-06-18 11:30:00We've all heard about AR, VR and blockchain, but what exactly are entertainment and media businesses doing with these technologies?

Want to Become a Billionaire? Invest in Your New! 2019-06-18 10:30:00Many investors haven't kept up with inflation over the last 20 years. Have you?

This Entrepreneur Stars in a Hit Network Series, New! 2019-06-18 10:00:00You've seen June Diane Raphael in "Grace and Frankie," but did you know she founded the first workspace to offer child care?

3 Things That Make Angel Investors Want to New! 2019-06-18 09:10:00Here are the key ingredients for a pitch that wins over angel investors.

Facebook's Cryptocurrency: Everything We Know So Far New! 2019-06-18 09:03:16Facebook's big blockchain play will reportedly create a crypto-based payments ecosystem across Facebook, Messenger, Instagram, WhatsApp and beyond.

How One Man Went From Maintaining Sports Fields New! 2019-06-18 08:30:00The athletic director for the University of Texas breaks down his journey to the top.

4 Things Leaders Misunderstand About Performance Reviews New! 2019-06-18 08:00:00Workers crave feedback, but feedback loops often go wrong.


Disclaimer and Notice:WorldProNews.com is not responsible of these news or any information published on this website.